TI Mindmap HUB
Threat Intelligence Report

CARBONATO:​ ​a​ ​botnet​ ​built​ ​around an AI agent​

📅 September 24, 2026 📰 www.threatdown.com 🔍 0 CVE(s) referenced

CARBONATO is a self-spreading Docker botnet that weaponizes an open-source AI agent to execute Telegram-issued post-compromise tasks, steal AI API keys and other credentials, and persist across hosts exposed on port 2375.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle